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DETAILED ACTION 

This action is in response to the papers filed 7/3/2007. Claims 1-1 1 were received for 
consideration. Claims 1,12 and 21 were amended. Currently claims 1-29 are under 
consideration. 

Response to Arguments 

Applicants arguments with respect to independent claim 1 have been considered but are 
not persuasive. Limsico in view of Kadooka clearly teaches "expiration logic residing on a first 
computer system operable to determine if the current password is approaching its expiration 
prior to logging onto the switched access remote test system residing on a second computer 
system and is operable to cause the user to be prompted to change the current password if the 
current password is determined to be approaching its expiration". Limsico teaches a local 
machine (i.e. first computer) v^th a" password GUI operable to change a user's password on a 
remote computer system (i.e. second computer). Kadooka teaches expiration logic residing on a 
first computer (Limsico* s local machine) system operable to determine if the current password is 
approaching its expiration prior to logging onto the switched access remote test system residing 
on a second computer system (Limsico' s remote machine) and is operable to cause the user to be 
prompted to change the current password if the current password is determined to be 
approaching its expiration (see figure 4a). It is clearly shown that determine if the current 
password is approaching its expiration (steps 4-2 - 4-6) is prior to logging on (step 4-9). 

Applicants arguments with respect to independent claim 12 have been considered but are 
not persuasive. Limsico in view of Kadooka clearly teaches "determining at the first computer 
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system if the current password is approaching its expiration prior to logging onto the switched 
access remote test system residing on a second computer system". Limsico teaches a local 
machine (i.e. first computer) with a password GUI operable to change a user's password on a 
remote computer system (i.e. second computer). Kadooka teaches expiration logic residing on a 
first computer (Limsico' s local machine) system operable to determine if the current password is 
approaching its expiration prior to logging onto the switched access remote test system residing 
on a second computer system (Limsico' s remote machine) and is operable to cause the user to be 
prompted to change the current password if the current password is determined to be 
approaching its expiration (see figure 4a). It is clearly shown that determine if the current 
password is approaching its expiration (steps 4-2 - 4-6) is prior to logging on (step 4-9). 

Applicants arguments with respect to independent claim 21 have been considered but are 
not persuasive. Limsico in view of Kadooka clearly teaches "determining at the first computer 
system if the current password is approaching its expiration prior to logging onto the switched 
access remote test system residing on a second computer system". Limsico teaches a local 
machine (i.e. first computer) with a password GUI operable to change a user's password on a 
remote computer system (i.e. second computer). Kadooka teaches expiration logic residing on a 
first computer (Limsico' s local machine) system operable to determine if the current password is 
approaching its expiration prior to logging onto the switched access remote test system residing 
on a second computer system (Limsico' s remote machine) and is operable to cause the user to be 
prompted to change the current password if the current password is determined to be 
approaching its expiration (see figure 4a). It is clearly shown that determine if the current 
password is approaching its expiration (steps 4-2 - 4-6) is prior to logging on (step 4-9). 
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Claim Rejections ' 35 USC§103 
The following is a quotation of 35 U. S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the in\ention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-10 and 12-29 are rejected under 35 U.S.C, 103(a) as being unpatentable over. 
Limsico (U.S. Patent # 5,793,952) in view of Ackroff (U.S. Patent # 5,105,438) in further view 
of Kadooka (U.S. Patent # 5,606,663). The Limsico (U.S. Patent # 5,793,952) reference with 
respect to claim 1 teaches a password management system, comprising a graphical user interface 
logic residing on a first computer system (see figure 3 element 310) operable to receive a current 
password from a user, prompt the user to determine whether the user desires to change the 
current password, and responsive to the user response receive a new password (see figure 3 and 
column 3 line 42-54). Password confirmation logic residing on a first computer system operable 
to confirm the current password associated with the user on a remote computer system residing 
on a second computer system (see figure 3 element 350) remote from the first computer system 
(see figure 3); password administration logic residing on a first computer system, responsive to 
the password confirmation logic and the graphical user interface, operable to receive the new 
password and to change the current password on the remote computer system (see figure 2 and 
column 4 line 57 - column 5 line 54). The Limsico reference does not teach that the remote 
computer system is a switched access remote test system (SARTS) and expiration logic residing 
on a first computer system operable to determine if the current password is approaching its 
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expiration prior to logging onto the switched access remote test system residing on a second 
computer system and is operable to cause the user to be prompted to change the current password 
if the current password is determined to be approaching its expiration. The AckrofF reference 
teaches that the remote computer system is a switched access remote test system (see column 3 
line 18-29). It would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have made the remote computer 
system taught by Limsico to be a switched access remote test system as discussed by Ackroff. 
SARTS providides a data base of circuit configurations and other key information, and in 
combination with a human interface for accessing circuits, issues test commands and receives 
measurements. The test equipment is not local to the circuit that is in trouble as it is more 
economical to make the test from a remotely centralized location (see column 1 lines 44-50). 
Therefore one would have been motivated to include a switched access remote test system on a 
password manager that is operable to change the current password at determined time or when 
the user request a change of password to keep the Switched access remote test system secure and 
only qualified user access to the switched access remote test system. The Kadooka reference 
teaches expiration logic residing on a second computer system operable to determine if the 
current password is approaching its expiration prior to logging onto the switched access remote 
test system residing on a second computer system remote from the first computer system and is 
operable to cause the user to be prompted to change the current password if the current password 
is determined to be approaching its expiration (see figure 4a). It would have been obvious at the 
time the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to make it possible to set the available period on the system side for each 
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password according to the access frequency of the user whom the password identifies, prescribe 
a password updating period for a certain length of time immediately preceding the expiration of 
the available period, inform the user who logs in the system during the updating period that the 
expiration of his password is imminent by displaying a message requesting him to change his 
password, and thereby urge him to update his password. Therefore one would be motivated to 
warn the user and set different length updating periods so a user who seldom accesses the system 
does not become unable to log in the system because his password has run out of its available 
period even if he never accessed the system during that period (see Kadooka column 1 lines 38- 
58). 

With respect to claim 2, the password confirmation logic is operable to send the current 
password to the switched access remote test system (i.e remote machine as taught by Ackroff) 
and receive a response from the switched access remote test system (i.e remote machine as 
taught by AckrofF also see Limsico column 5 line 43 - column 6 line 65). 

With respect to claim 3, the password confirmation logic is operable to compare the 
response with a plurality of expected responses and determine whether the current password 
provided by the user is valid (see Limsico column 6 lines 5-28). 

With respect to claim 4, the response is an alphanumeric string, and the plurality of 
expected responses comprises erroneous responses and successful responses (see Limsico 
column 5 line 43 - column 7 line 16). 

With respect to claim 5, the password confirmation logic is operable to instruct the 
graphical user interface logic to provide any of a plurality of error messages to the user upon the 
password confirmation logic determining that the current password provided by the user is not 
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valid (see Limsico figure 5B elements 5160, 5190, and 5310 "Display Error Message" and 
column 5 line 43 - column 6 line 54). 

With respect to claim 6, the password administration logic performs a password change 
upon receiving a request to change the password from the graphical user interface (see Limsico 
column 5 line 43-54). 

With respect to claim 7, the password administration logic performs a password change 
upon receiving a confirmation of the password from the password confirmation logic (see 
Limsico figure 5C element 5250 "Display Verify Password GUI" and column 6 lines 18-39). 

With respect to claim 8, the password administration logic is operable to send the current 
password and the new password to the switched access remote test system (i.e remote machine as 
taught by Ackrofif) and receive a response from the switched access remote test system (i.e 
remote machine as taught by Ackroff), and compare the response to a plurality of expected 
responses (see Limsico column 5 lines 43 and column 7 lines 16). 

With respect to claim 9, the password administration logic is operable to instruct the 
graphical user interface logic to provide any of a plurality of error messages to the user upon the 
password administration logic determining that the new password provided by the user was not 
accepted by the switched access remote test system (see Limsico figure 5 elements 5160, 5190, 
and 5310 "Display Error Message" and column 5 line 43 - column 6 line 54). 

With respect to claim 10, the Limsico reference further comprises a password file 
operable to store a set of data comprising the expiration date of the current password; wherein 
the expiration logic is operable to read the password file and request that the graphical user 
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interface notify the user that the current password is nearing expiration responsive to the 
expiration date (see Limsico column 9 line 5-40). 

With respect to claim 12 and 21, the Limsico reference teaches, a method of managing 
passwords, comprising the steps of providing a user with a graphical user interface residing on a 
first computer system (see figure 3 element 310). Receiving a current password from the user via 
the graphical user interface for a remote computer system residing on a second computer system 
(see figure 3 element 350) remote from the first computer system. Prompting the user on whether 
to change the current password, receiving a new password from the user responsive to the user 
response to the prompting (see figure 3 and column 3 lines 41-54 and column 4 line 57 - column 
5 line 2). Confirming the current password with the remote computer system and requesting that 
the remote computer system change the password responsive to the user response to the 
prompting (see column 5 line 43 - column 6 line 65). The Limsico reference does not teach that 
the remote computer system is a switched access remote test system and determining at the first 
computer system if the current password is approaching its expiration prior to logging onto the 
switched access remote test system residing on a second computer system. The Ackroff reference 
teaches that the remote computer system is a switched access remote test system (see column 3 
line 18-29). It would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have made the remote computer 
system taught by Limsico to be a switched access remote test system as discussed by AckrofF. 
SARTS providides a data base of circuit configurations and other key information, and in 
combination with a human interface for accessing circuits, issues test commands and receives 



Application/Control Number: 1 0/729,293 Page 9 

Art Unit: 2132 

measurements. The test equipment is not local to the circuit that is in trouble as it is more 
economical to make the test from a remotely centralized location (see column 1 lines 44-50). 
Therefore one would be motivated to include a switched access remote test system on a 
password manager that is operable to change the current password at determined time or when 
the user request a change of password to keep the Switched access remote test system secure and 
only quahfied user access to the switched access remote test system. The Kadooka reference 
teaches determining at the first computer system if the current password is approaching its 
expiration prior to logging onto the switched access remote test system residing on a second 
computer system (see figure 4a). It would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains to make it 
possible to set the available period on the system side for each password according to the access 
frequency of the user whom the password identifies, prescribe a password updating period for a 
certain length of time immediately preceding the expiration of the available period, inform the 
user who logs in the system during the updating period that the expiration of his password is 
imminent by displaying a message requesting him to change his password, and thereby urge him 
to update his password. Therefore one would be motivated to warn the user and set different 
length updating periods so a user who seldom accesses the system does not become unable to log 
in the system because his password has run out of its available period even if he never accessed 
the system during that period (see Kadooka column 1 lines 38-58). 

With respect to claims 13 and 22, the confirming the current password further comprises 
sending the Current password to the switched access remote test system (i.e remote machine as 
taught by Ackroff) and receiving a response from the switched access remote test system (i.e 
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remote machine as taught by Ackroff also see Limsico column 5 line 43 - column 6 line 65 and 
column 7 line 46 - column 9 line 1 5). 

With respect to claims 14 and 23, the confirming the current password further comprises 
comparing the response from the switched access remote test system with a plurahty of expected 
responses (see Limsico column 5 lines 43 - column 7 lines 16). 

With respect to claims 15 and 24, the confirming the current password further comprises 
notifying the user of an error responsive to comparing the response from the switched access 
remote test system (see Limsico column 5 line 43 - column 6 hne 65 i.e. an error message is 
displayed at step 5310). 

With respect to claims 16 and 25, the requesting that the switched access remote test 
system (i.e remote machine as taught by Ackroff) change the password responsive to the user 
response to the prompting further comprises sending the new password to the switched access 
remote test system (i.e remote machine as taught by Ackroff) along with the current password 
(see Limsico column 4 hne 57 - column 5 line 12 and column 8 hne 58-63). 

With respect to claims 17 and 26, the requesting that the switched access remote test (i.e 
remote machine as taught by Ackroff) system change the password responsive to the user 
response to the prompting further comprises receiving a response from the switched access 
remote test system (i.e remote machine as taught by Ackroff) after sending the new password 
(see Limsico column and column 1 1 lines 6-10). 

With respect to claims 18 and 27, further comprising the step of comparing the received 
response with a plurality of expected responses (see Limsico column 5 line 43 - column 7 line 
16). 
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With respect to claims 19 and 28, further comprising the step of providing an error 
message to the user responsive to the comparing the received response (see Limsico figure 5 
elements 5160, 5190, and 5310 "Display Error Message'' and column 5 line 43 - column 6 line 
54). 

With respect to claims 20 and 29, further comprising the steps of reading a password file 
to determine an expiration date associated with the current password and prompting the user to 
change the password responsive to determination of the expiration date (see Limsico column 9 
lines 5-40). 

Claim 1 1 is rejected under 35 U.S.C, 103(a) as being unpatentable over Limsico (U.S. 
Patent # 5,793,952) in view of Ackroff (U.S. Patent # 5,105,438) in view of Kadooka (U.S. 
Patent # 5,606,663) in further view of Goldberg et al (U.S. Patent # 5,748,890). Limsico in view 
of Ackroff teaches everything with respect to claim 1 above but with respect to claim 1 1 the 
Limsico in view of Achrofif does not teaches a password management system is operable to 
interact with at least two switched access remote testing systems through a second graphical user 
interface that forms a wrapper for said at least two switched access remote testing system. 
Goldberg teaches a password management system is operable to interact with at least two 
switched access remote testing systems (i.e remote machine as taught by Limsico in view of 
AckrofF) through a second graphical user interface that forms a wrapper for said at least two 
switched access remote testing system (i.e remote machine as taught by Limsico in view of 
Ackroff, also see Goldberg column 1 lines 26-67). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter 
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pertains to have modified a remote password management system that would be able to interact 
with at least two host. Therefore one would have been motivated to design a password 
management system that could be use interact with at least two host to make it easier and more 
secure then having one password for each host. Trying to remember different passwords for each 
host is very time consuming, expensive, and ineffective from an accountably standpoint. Have 
one system would have made it a lot easier than having books with host applications and 
corresponding passwords (see column 1 lines 13-55). 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is (571) 270-1018. The 
examiner can normally be reached on Mon-Thur 8:00-5:30 Second Fri 8:00-4:30 EST. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Gilberto Barron can be reached on (571) 272 3799. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
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like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Devin Almeida 

Patent Exammer ^ 
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